[PATCH 0/1] Implement new sample fetch method to get the curve name used in key agreement

2023-07-14 Thread Mariam John
This is an implementation of feature request [#2165](https://github.com/haproxy/haproxy/issues/2165), to get the EC curve name used during the key agreement in OpenSSL. This patch includes the following changes: - new sample fetch methods `ssl_fc_curve` and `ssl_bc_curve`, to get the curve name

Re: Old style OCSP not working anymore?

2023-07-14 Thread Sander Klein
Hi, On 2023-07-14 01:56, Shawn Heisey wrote: On 7/13/23 09:01, Sander Klein wrote: I tried upgrading from 2.6.14 to 2.8.1, but after the upgrade I couldn't connect to any of the sites behind it. While looking at the error it seems like OCSP is not working anymore. Right now I have a setup

[PATCH 1/1] MEDIUM: ssl: new sample fetch method to get curve name

2023-07-14 Thread Mariam John
Adds a new sample fetch method to get the curve name used in the key agreement to enable better observability. In OpenSSLv3, the function `SSL_get_negotiated_group` returns the NID of the curve and from the NID, we get the curve name by passing the NID to OBJ_nid2sn. This was not available in

Compiling HAProxy 2.8.1 with WolfSSL 5.6.3 yields errors about OCSP

2023-07-14 Thread Marcel Menzel
Hello List, Trying to compile HAProxy version 2.8.1 with WolfSSL 5.6.3 results in the following error: src/ssl_sock.c: In function ‘ssl_sock_load_ocsp’: src/ssl_sock.c:1117:9: error: unknown type name ‘tlsextStatusCb’  1117 | tlsextStatusCb callback;   | ^~

[PATCH 0/2] improve CI friendliness

2023-07-14 Thread Ilya Shipitsin
thanks to Andrew Hopkins from Amazon, we've learned that CI is already easy to learn, however few things can be improved. let us add naming convention inline comment, also if VTest fails, let is highlight that. Ilya Shipitsin (2): CI: add naming convention documentation CI: explicitely

[PATCH 2/2] CI: explicitely highlight VTest result section if there's something

2023-07-14 Thread Ilya Shipitsin
it turned out that people miss VTest result section because it is not highlighted, let us fix that --- .github/workflows/vtest.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/vtest.yml b/.github/workflows/vtest.yml index 25d3cc72e..6977788a3 100644 ---

[PATCH 1/2] CI: add naming convention documentation

2023-07-14 Thread Ilya Shipitsin
branches "haproxy-" stand for stable branches, otherwise development --- .github/matrix.py | 18 +- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/.github/matrix.py b/.github/matrix.py index 7f22c43bb..dbf987e93 100755 --- a/.github/matrix.py +++